Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: G6122PkzNNVb4SZAbJZ+/LwJcJxgjJQsc7JvkO2QMFY=
Subject key identifier: 78:52:1E:D7:04:E0:59:28:EB:D0:8F:49:1A:EB:A8:80:7C:C7:C4:71
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019CACEC00258C3CF0993F817D1401976D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0ED5
Signing time: Mon 02 Mar 2026 05:01:13 +0000
Manifest this update: Mon 02 Mar 2026 05:01:13 +0000
Manifest next update: Tue 03 Mar 2026 05:01:13 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: xJbwIBnA3hHkT/RcDcIs2Wg68jYaSzzc291sRxuTNiM=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:ec:00:25:8c:3c:f0:99:3f:81:7d:14:01:97:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Mar 2 05:01:13 2026 GMT
Not After : Mar 3 05:01:13 2026 GMT
Subject: CN=78521ed704e05928ebd08f491aeba8807cc7c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:80:76:00:47:bc:f3:f9:98:5e:da:79:18:
78:8f:7f:09:2e:d1:0f:f4:44:52:1e:d8:cf:f8:09:
b1:c5:9e:5a:3d:bb:e6:04:6c:6c:59:10:19:74:26:
c6:b3:3c:75:af:5d:29:d6:05:fe:00:06:49:08:de:
2b:68:88:c3:c3:41:23:6c:2c:2a:c8:9c:6d:df:cd:
0e:44:b3:f4:cc:f0:93:a8:14:29:36:89:65:5a:a2:
bb:ce:75:c3:26:67:b5:9d:dc:55:1d:e2:91:de:c2:
fb:2d:e7:29:ef:b4:de:85:00:48:5e:ed:18:ba:d7:
88:e8:22:3a:cb:09:cf:53:20:b8:b7:a4:f5:71:ea:
a4:eb:f9:97:65:62:a2:38:60:c3:12:fd:2f:7d:1d:
ec:e2:b6:8f:26:34:bb:c3:e7:2d:f3:8b:29:3a:a9:
8d:43:c4:91:10:78:21:76:a5:d2:e9:c1:94:6c:ae:
aa:e4:1d:89:6d:38:5d:cf:ca:f9:0d:e7:7d:9a:70:
3c:fc:08:19:82:49:ef:29:99:96:3a:ab:1b:01:7e:
8e:4c:86:cb:57:9c:48:19:59:29:b4:f2:69:f5:cc:
26:67:b9:13:a2:5b:58:da:11:12:8a:b9:cc:08:18:
7a:71:ac:8e:b2:3e:a6:f0:05:fb:34:3b:85:c5:6b:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:1E:D7:04:E0:59:28:EB:D0:8F:49:1A:EB:A8:80:7C:C7:C4:71
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:61:cc:e4:ad:24:5a:79:59:a6:dc:73:15:16:21:a4:00:
99:b8:a3:ad:ee:c5:a4:2d:f5:cc:dc:9f:dc:cc:50:7c:62:81:
4f:4d:da:7a:60:d5:2a:ff:be:f8:3e:9d:26:78:c6:2e:a7:9f:
83:93:d8:50:8c:8f:91:42:18:ca:c7:ba:f9:66:e0:75:70:ff:
b7:16:bd:08:8b:70:50:7d:71:d2:83:7c:6d:85:6e:e7:b1:a3:
75:da:45:8c:fc:9d:25:ba:39:f5:0d:45:fe:3b:be:0d:e3:3c:
5b:67:b7:86:59:8f:21:bf:e5:68:be:36:4b:09:22:f7:4d:9f:
2c:57:72:bc:d3:f3:31:09:6f:b1:da:34:97:17:4c:26:4b:ba:
51:b3:01:bc:a2:69:fb:e1:1e:33:b5:7d:68:d5:b8:01:64:de:
b3:a2:54:3e:de:a1:f0:0f:4a:40:e2:94:b8:02:68:18:4b:e8:
16:ed:11:10:c6:d3:a8:f2:17:89:78:d6:9f:f6:ab:d0:62:89:
dd:68:b7:05:82:6b:aa:f3:75:b4:77:df:27:63:aa:42:55:34:
f7:87:d6:9b:d1:70:0f:83:2e:18:67:cb:98:f3:53:40:5d:b5:
ce:3d:db:2c:12:12:d4:90:62:28:70:9d:da:ab:53:a0:67:14:
1a:45:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:33 2026 by rpki-client